Security

The panel protects the server with two tools, which you find on the Security page.

Firewall

The firewall decides which “ports” of the server are reachable from the Internet. Usually only the web ports (80 and 443), the SSH/SFTP port and the panel port need to be open.

• With Turn on firewall / Turn off firewall you switch it on or off.
• You can add rules: allow, reject or limit (against repeated attempts) a port, even only from a certain IP address.

The rules that keep SSH and the panel reachable cannot be deleted: this way you do not risk locking yourself out of the server.

Blocking login attempts (fail2ban)

fail2ban blocks for a while the addresses that repeatedly get the password wrong (for example on SSH). On the page you see the blocked addresses and you can:

• unblock an address blocked by mistake;
• block an address manually;
• choose after how many attempts to block, for how long and in which time window to count the attempts;
• set the IPs never blocked, for example your office one.

Activity log

On the Log page you find who did what, when and from which address: creations, changes, deletions, logins to the panel and server switches.

Good habits

• Use a long password, different from the ones you use elsewhere.
• Enter your email on the Account page: if someone changes your password, you will know right away.
• Configure backups and keep the repository password away from the server.